diff --git a/config.rb b/config.rb
index efc69f57f..b9aaa038d 100644
--- a/config.rb
+++ b/config.rb
@@ -48,6 +48,10 @@
 config[:tech_docs] = YAML.load_file(config_file).with_indifferent_access
 activate :unique_identifier
 
+redirect "security.txt/index.html", to: "https://vdp.cabinetoffice.gov.uk/.well-known/security.txt"
+redirect ".well-known/security.txt/index.html", to: "https://vdp.cabinetoffice.gov.uk/.well-known/security.txt"
+import_file File.expand_path("_config.yml", config[:source]), "/_config.yml"
+
 helpers do
   include GovukTechDocs::ContributionBanner
 
diff --git a/source/_config.yml b/source/_config.yml
new file mode 100644
index 000000000..45a5ea3aa
--- /dev/null
+++ b/source/_config.yml
@@ -0,0 +1,2 @@
+include:
+- ".well-known"